craft-project-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly states the planner will clone and audit public repositories into the devRootPath research folder and runs commands like "Bash(git clone * {devRootPath}/research/*)", "Bash(gh repo view *)", and "Bash(gh api *)", which clearly fetch and ingest untrusted, user‑generated third‑party content from the open web as part of its workflow.